The security community I grew up with was welcoming and understanding, and it sparked an interest I never would have realized otherwise.
I feel comfortable assuming the original PR is a joke.
The plural of anecdote is not data, but I have first hand experience with someone who can make a pull request but doesn't understand password best practices at all.
Granted it might be because I taught them to make pull requests, but still...
I know people who wrote code for their thesis in Python but can't grasp why indentation matters. You'd be surprised by what people do and don't know.
How can one write code (that runs!) for one's thesis without paying attention to Python's semantically significant whitespace?
After submitting changes that started 10 indents past the previous line, and had little to no rhyme or reason for subsequent indentation, we asked them to reformat and resubmit. When it became clear that they could not, we reviewed the code itself separately from the indentation and reformatted it ourselves.
Multiple co-workers sat next to them to try to explain how to line things up vertically, but they were unable to do so without said help.
This was over the course of about two weeks in which we were instructed to try to bring them onboard some of our projects. Both our and their projects at the time were frontend web projects.
I have not looked at any of their code outside what was submitted to our side, but I do know they are praised for the quality of their work by management.
I expect it was, as the other commenter said, probably via an IDE like PyCharm. I never asked because there's no good way to ask a question like that.
But that's my point, people's knowledge is all over the place. It's probably a joke, but it could easily not be.
By fiddling around with different indentations levels till the code works.
So much code out there is written this way.
Kind of gives a new meaning to 'iterating' on one's code doesn't it?
You can make these sorts of trivial changes just by clicking around the GitHub web UI, I could probably tell a 12 year old how to make a trivial change like this, regardless of their coding expertise https://help.github.com/articles/editing-files-in-your-repos...
That was horrifying to realize that the person writing the front end for an ecommerce application not only could not calculate tax, but would brag about how he doesn't need to know basic math.
[0]: http://blog.assafnativ.com/2014/03/the-making-of-kosher-phon...
lol
I am not sure the issue poster really uses that password...
https://github.com/danielmiessler/SecLists/pull/155#issuecom...